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ABSTRACT 



Illegal view and copy protection method in a digital video 
system for preventing an illegal user from viewing the 
digital video system and copying therefrom* by setting a 
descrarabling method which decrypts split keystreams 
adopting a smart card, including a determination step for 
determining received data of having been scrambled; a 
reproduction step, a recording step, and a transporting step, 
wherein the reproduction step, the recording step and the 
transporting step can be performed simultaneously or selec- 
tively. 
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ILLEGAL VIEW AND COPY PROTECTION 
METHOD IN DIGITAL VIDEO SYSTEM AND 
CONTROLLING METHOD THEREOF 

BACKGROUND OF THE INVENTION 

The present Invention relates to an illegal view and copy 
protection technique for a digital video system, and more 
particularly, to an illegal view and copy protection method 
in a digital video system for preventing an illegal user from 
viewing the digital video system and copying therefrom, by 
setting a descrambling method which decrypts split key- 
streams adopting a smart card. 

In a general digital video system, there has been a keen 
interest in implementing a conditional access (CA) system 
for an illegal viewing protection. 

In such a CA system, a broadcasting signal is scrambled 
at charged channels such as in a cable television or a satellite 
broadcasting service to be broadcasted. Therefore, only a 
user who paid normally can view a program properly 
through descrambling. 

For example, a satellite broadcasting receiver or a Grand 
Alliance (GA) system, which is a standard of an advanced 
television (ATV) in U.S.A. has a function for supporting a 
CA. Also, scrambling/descr ambling apparatus, such as a 
video cipher manufactured by GI. which can be used for a 
satellite broadcasting, have been commonly used 

Video cipher manufactured by GI is generally used for the 
scrambling system for a CA system, which is based in U.S. 
Pat. No. 4,613*901 by Gilhousen. disclosing a system and 
method, in which a TV signal transported via a normal user's 
de scrambler is scrambled in a charged TV system to be 
broadcasted and then is selectively descrambled in the user's 
descrambler. A video cipher system for performing a 
descrambling is implemented by adopting a smart card, 
which is disclosed in U.S. Pat No. 5,111.504. This is 
implemented such that the system proposed by Gilhousen is 
partitioned into two parts, that is, an information processor 
corresponding to a descrambler and a security element 
which can be replaced by a smart card. 

Therefore, by adopting the above method, the scrambling 
system is implemented as shown in FIG. 1, and the descram- 
bling system is implemented as shown in FIG. 2. 

In other words, a conventional illegal viewing protecting 
apparatus for a digital video system includes a scrambler 
101 for scrambling a TV signal in accordance with a 
common category key (CK) and an initialization vector (PK) 
and outputting the scrambled TV signal (SV 0 ) and scram- 
bling information B u<g ^ aiJ fCK) and E CJK (PK). a smart 
card 103 for encrypting information for descrambling. A(D) 
and A(S), with respect to descrambling information U(S). 
and an information processor 102 for decrypting the infor- 
mation far descrambling, E A(£>) [E A(5) (WK)), to descramble 
the TV signal (SVq) transported from scrambler 101 and 
restoring the same into original TV signal DV^ 

Here. A(D) is an authentication key of information pro- 
cessor 102, A(S) is an authentication key of smart key 103. 
U(D) is a unit key of information processor 102. and U(S) 
is a unit key of smart key 103. 

At this time, scrambler 101 includes a first encrypter 111 
for encrypting a common category key (CK) with respect to 
descrambling information U(D) and U(S), a second 
encrypter 112 for encrypting an initialization vector (PK) 
with respect to the common category key (CK), a third 
encrypter 113 for encrypting the initialization vector (PK) 
with respect to the output E^PK) of second encrypter 112. 



2 

and a scrambling executing party 114 for scrambling a TV 
signal V, in accordance with the output WK of third 
encrypter 113. 

The operation of the conventional apparatus having the 
5 aforementioned configuration will now be described. 

First in the case of transporting a TV signal in a transport 
system, scrambler 101 operates such that the common 
category key (CK) is encrypted with respect to the descram- 
bling information U(D) and U(S) by first encrypter 111, the 
l0 initialization vector (PK) is encrypted with respect to the 
common category key (CK) by second encrypter 112. the 
initialization vector (PK) is encrypted with respect to the 
output B Cft fPK) of second encrypter 112 by third encrypter 
113. to then be output to scrambling executing party 114. 
15 At this time, scrambling executing party 114 scrambles 
the TV signal V, in accordance with the output WK of third 
encrypter 113. Here, the scrambling information WK is 
expressed in E^^p^K). 

Accordingly, scrambler 101 transports information E U(D) 
20 B U(S) (CK) encrypted with respect so the common category 
key (CK), the information E CJC (PK) encrypted initialization 
vector (PK) and the scrambled TV signal SV^ to informa- 
tion processor 102. 

In case of descrambling the scrambled TV signal SV 0 , 
25 smart card 103 encrypts the information WK necessary for 
descrambling with respect to authentication information 
A(D) of information processor 102 and its own authentica- 
tion information A(S). and then generates the encrypted 
descrambling information E A(0) [E„ (5) (WK)] to information 
30 processor 102. 

Accordingly, information processor 102 decrypts the 
encrypted descrambling information E^^fE^CWK)! gen- 
erated from smart card 103 and descrambles the TV signal 
SV 0 transported from scrambler 101 using the encrypted 
35 descrambling information E A(/>) [E X(S) (WK)), thereby restor- 
ing the same into the original TV signal DV 0 . 

Here, the encryption in transporting the information 
between information processor 102 and smart card 103 is 
adopted far enhance the security from the illegal view and 
40 copy. 

For example, the specification of a GA-HtTTV system 
supports the CA system and includes various functions 
necessary for transport protocols. 
These functions are flexible and useful in that they 
45 support all possible descrambling methods and key encryp- 
tion methods, and bitstreams are selectively scrambled so 
that a CA function can be adopted in the unit of an element 
stream. 

^ Here, the scrambling randomizes data bit stream according 
to information data, and the encryption converts information 
data in order to protect the information data from illegal 
users. 

In other words, the CA system makes the transported data 
55 random and disables the illegal users 1 decoders to be 
decoded improperly by means of a scrambler but allows the 
legal users 1 decoders to decode the received TV broadcast- 
ing signals properly by supplying information for initializ- 
ing a descrambler circuit. 
$0 The CA transport MPEG protocol for such operation is 
implemented by the format shown in FIG. 3 and supports the 
CA function as follows. 

First atnnsport-scrambling-control field of 2 bits notifies 
whether or not a transport stream is scrambled and which 
65 scrambling key is used. 

Second, each data is inserted into the GA transport system 
using a transport-private -data field positioned within adap- 
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lation header of the transported stream, and encrypted rithra using a PN sequence. The key encrypted by ATV 

scrambling information is stored in the field. decoder 110 is decrypted in smart card 103. Here, the 

The CA transport MPEG protocol transports a transport interface between smart card 103 and ATV decoder 110 is 

header, a packetized elementary stream (PES) and audio and executed in accordance with the ISO-7816 standard spcci- 

video data independently or concurrently. The transport 5 fixation. 

protocol includes a header link header region, an adaptation In other words, in the embodiment shown in FIG. 6. a 

header region and a payload region. signal received from a tuner is demodulated in a demodu- 

Here the link header has a length of 4 bytes and the later & error corrector 104 and then the errors generated 

adaptation head has a variable length. in ^a^port are corrected by an ^decoding and are 

J~ . " c . j . . . . . . io input to transport demultiplexer 105 of ATV decoder 110 to 

The transport-scrambling-control field is inserted into the . " ^ Jr. y 

link header. A field value of ' W is recognized as being not descrambled. 

scrambled. "10" is recognized as being an even key. "11" is At this time, a microcontroUer 109 operates descrambled 

recognized as being an odd key. and "Or is recognized as control and data and transports the encryption information 

being reserved. for ^scrambling to smart card 103. Smart card 103 decrypts 

The adaptation header includes a flag bit and transport- 15 ^^ oa formation to transport the same 

private-data field, and the flag bit includes transport-private- t0 Arv decoder 110. 

data flag of one bit The PES header of the CA transport At this time, transport demultiplexer 105 restores a cora- 

MPEG protocol shown in FIG. 3 is constructed as shown in pressed video and audio signals, control signal and data 

pjQ ^ according to the descrambling information. 

A field for a digital storage media (DSM) such as a digital 2 ° Accordingly, a video decoder 107 extends the compressed 

video cassette recorder (DVCR) exists in the PES header. video signal and temporarily stores the extended signa in a 

Such a field include a PES header flag region having a length memory 106 and then outputs the stored data to display a 

of 14 bits and a PES header field having a variable length. video. An audio decoder 108 extends the compressed audio 

The PES header flag region includes a 1-bit copyright (CR) 25 si S Dal and thcn reF 0 ** 1 ** 30 audio - 

flag, a 1-bit original-or-copy flag, a 2-bit PD flag, a 1-bit TM ' Also, microcontroller 109 reads the control signal and 

flag and a l-bit AC flag. data output from transport demultiplexer 105 and controls 

The PES header field has a variable length and its region the operations of video decoder 107 and audio decoder 108. 

is partially set by the PD. TM and AC flags contained in the Among various methods used for encryption, a block- 

PES header flag region. 30 cipher algorithm such as DES and a stream-cipher algorithm 

In other words. FTSIUVS regions do not exist in the PES using the PN sequence are most widely used, 

header field ifthePD flag value is "00." FTS/E)TS of 40 bits However, since these methods perform encryption and 

exist if the PD flag value is "10, n FTS/DTS of 80 bits exist decryption only with a encrypted signal, a key management 

if thePDflagvalueis"ll."ADSMtrickmodedoesnotexist and a key distribution are hard to accomplish, 

if the TM flag value is i4 0. M and the DSM trick mode 35 Therefore, in order to solve the above problem, a public 

becomes 8 bits if the TM flag value is "1." Also, if the AC key encryption method has been proposed in U.S. Pat No. 

flag is set to "1," an additional copy information field 4, 200,770. This method performs encryption using a public 

becomes 8 bits. key and performs decryption using his own secret key. 

The scrambling information is transported by adopting the The public key encryption method has been improved and 

above-described format, and the descrambling process using 40 implemented as an encryption system, which is known as an 

the information is shown in FIG. 5. RSA encryption algorithm disclosed in U.S. Pat No. 4,405. 

Here, since the descrambling system decrypts the next 829. However, this public key encryption method is not 

encrypted key together with the key being used for the suitable for fast encryption. 

current descrambling. the descrambler stores at least two ^ The CA system aims to protect an illegal viewing, 

keys, that is. an odd key and an even key. However, programs distributed through a DSM such as a 

Also, the scrambling system sets a value of the transport- DVCR cannot be protected from the illegal copying, 

scramb ling-control field within the link header according to other words, the protection of the program distributed 

the descrambling method of the current transport stream to by a recording medium such as DSM means the illegal 

then transport the same. 50 copying protection. However, the copy protection method 

Accordingly, the descrambler determines an even key or adopted in a conventional analog VCR system is difficult to 

an odd key according to the value of the transport- be adopted in a digital storage media. Also, research into the 

scrambling-control field of the decrypted transport head copy protection method for DSM has not yet been developed 

from the received data and then descrambles the received well. 

data to men be decreed. .35 SUMMARY OF THE INVENTION 

In other words, when the data having the format shown in 

FIG. 5 is transported and descrambler descrambles the To solve the above problems of the conventional art. it is 
Kj^-th frame with the odd key according to the value of an object of the present invention to provide illegal view and 

the transport-scrambling-control field decrypted io smart copy protection method in a digital video system and a 

card, smart card decrypts the transport-scrambling-control 60 controlling method thereof for protecting illegal view and 

field of K^-th frame to be descrambled nest These opera- copy, in which encrypted key is decrypted in a smart card by 

tions are sequentially performed. transporting a scrambled bit stream and the encrypted key 

An ATV decoder for performing the CA function may be used for scrambling to different paths and the bitstream is 
implemented as shown in FIG. 6. The ATV decoder 110 descrairAledinaccc^cewitJ^ 
incorporates a descrambler necessitating a fast operation 65 decoding is not performed only by the bitstream. 

into a transport demultiplexer 105 and performs the It is other object of the present invention to adopt a smart 
descrambling by a DES algorithm or a stream cipher algo- card in the CA system so that the charge is automatically 
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checked to enforce the pay per view (PPV) function and to two times with respect to its own key information and the 

upgrade the performance of the system by adding various key information from the recording side for transporting the 

functions by way of replacement of the smart card. keystream; and a second recording step for encrypting the 

It is another object of the present invention to reduce the keystream transported in the second transportation step with 

key quantity of the data to be protected greatly by splitting 5 respect to the key information from the recording side and 

the transported data and to make the system inoperative with inserting the encrypted keystream into the position corre- 

an illegal smart card by automatic performance of authen- spending to the index code, for recording the keystream 

tication and key exchange during power-on or connection to together with the bitstream on a recording medium, 

a digital recording/reproduction device for recording. According to further aspect of the present invention, there 

thereby increasing the reliability of the protection function. l0 is provided an illegal view and copy protection method in a 

According to one aspect of the present invention, there is &m video systenx including: a PPC mode reproduction 

provided an illegal view and copy protection method in a *£«* ha ™g determined the recording medium being a 

drgital video system, including: a determination step for ^T\°„ ™ 

. ; 7 . j , * . , . , . reproduction from a recording medium, encrypting the key- 
determining received data of having been scrambled; a ^ its ow f k intmn^m&da^^ 
reproduction step, if the received data was detenmned to be 15 ^ ^ ^ withres pecttoits own key information for 
scrambled data in the determination step, splitting the fc * m mc ^ ^^t^ for descrambling the bit- 
scrambled data into a bitstream and a keystream for decrypt- stream using both te rea d in key information and an index 
ing the split keystream for reading in key information, and codc; and a * D ack-up copy' mode reproduction step for, 
descrambling the split bitstream according to the read in key having determined the recording medium being a 'back-up 
information for displaying the bitstream on a display; a 20 copy' recording medium on detection of a keystream 
recording step for, if the received data was determined to be decrypted with respect to its own key information at repro- 
scrambled data in the determination step, recording the duction from a recording medium, encrypting the keystream 
scrambled data on a recording medium either as scrambled for two times with respect to its own key information and the 
data of a bitstream and a keystream according to a recording key information from a recording side and decrypting the 
or copying mode, or after splitting (he scrambled data into 23 keystream with respect to its own key iirformation for 
a bitstream and a keystream, encrypting the split keystream, reading in the key information, for descrambling the bit- 
and mixing the encrypted keystream with the bitstream; and stream using both the read in key information and an index 
a transporting step, if the received data was determined to be code. 

scrambled data in the determination step, splitting the According to still another object of the present invention, 
scrambled data into a bitstream and a keystream for trans- ^ there is provided an illegal view and copy protection device 
porting the split keystream either after decrypting the split in a digital video system, including: demodulating & error 
keystream with respect to key information from recording correcting means for modulating/demodulating an analog 
side according to a PPC mode or a back-up copy mode, or broadcasting signal and RS-decoding said signal; copy pro- 
after decrypting the split keystream two times with respect tection processing means for transporting the output of said 
to key information of its own and key information from 35 demodulating & error correcting means to a digital 
recording side, thereby the reproduction step, the recording recording/reproduction device, splitting the scrambled 
step and the transporting step can be performed siraulta- recording signal reproduced from said digital recording/ 
neously or selectively. reproduction device into a bitstream and a keystream, and 
According to other aspect of the present invention, there encrypting the split keystream; decoding means for 
is provided an illegal view and copy protection method in a 40 descrambling the bitstream from said demodulating & error 
digital video system, including: a reproduction step, on correcting means or the copy protection processing means 
reception of scrambled data, splitting the scrambled data according to descrambling information; and a smart card for 
into a bitstream and a keystream for decrypting the split decrypting the encrypted keystream of said copy protection 
keystream for reading in key information, and descrambling processing means for applying to said decoding means as 
the split bitstream according to the read in key information 45 descrambling information. 

for displaying the bitstream on a display; and a recording According to still another object of the present invention, 
step for, on reception of scrambled data, recording the there is provided an illegal view and copy protection device 
scrambled data on a recording medium as scrambled data of in a digital video system, including: first copy protection 
a bitstream and a keystream; thereby the reproduction step processing means for splitting reproduction data from a first 
and the recording step can be performed simultaneously or 50 digital recording/reproduction device into a bitstream and a 
selectively. keystream and encrypting the split keystream; first and 
According to another aspect of the present invention, second smart cards for decrypting encrypted keystream from 
there is provided an illegal view and copy protection method said first copy protection processing means with respect to 
in a digital video system, including: a determining step for its own key information and the key information from a 
determining the mode of the keystream being a back-up 55 recording side; and second copy protection processing 
copy mode or a PPC mode; a first transportation step for. if means for encrypting the keystream from the first smart card 
the mode was determined to be a PPC mode in the deter- transported through the second smart card with respect to its 
mining step, decrypting the keystream with respect to key own key information and transporting the encrypted key- 
information from a recording side for transporting the key- stream together with the split bitstream to a second digital 
stream; a first recording step for encrypting the keystream 60 reccrorng/reproduction device, for recording on a recording 
transported in the first transportation step with respect to the medium. 

key information from the recording side and inserting the In the present invention, the copy protection processing 

encrypted keystream into a position corresponding to an means includes a RAM for storing intrinsic key information 

index code, for recording the keystream together with a of the smart card, an algorithm storage memory for storing 

bitstream on a recording medium; a second transportation 65 an encryption algorithm, and a processor for executing an 

step for, if the mode was determined to be a back-up copy encryption program of the algorithm storage memory with 

mode in the detennining step, decrypting the keystream for the key information of the RAM. 



09/26/2003, EAST Version: 1.04.0000 



5.757.909 

7 8 

Aforeracationcd copy protection processing means card, an algorithm storage memory 18 for storing an enoryp- 

includes a CA function as well as an all round program Uon algorithm, and a processor 19 for executing an encryp- 

copyright protection function inclusive of illegal viewing tion program of algorithm storage memory 18 with the key 

protection and illegal copying protection. information of RAM 17. 

In the present invention, the smart card includes a first 5 Smart card 3, as shown in FIG. 9. includes a first 
algorithm storage memory for storing a decryption algo- algorithm storage memory 12 for storing a decryption algo- 
rithm program for a bitstream, a second algorithm storage rithm program for a bitstream. a second algorithm storage 
memory for storing a decryption algorithm program of its memory 13 for storing a decryption algorithm program of its 
own key information, a ROM for storing its own key own key information, a ROM 14 for storing its own key 
information, and a RAM for temporarily storing key infor- 10 information, a RAM 15 for temporarily storing key infor- 
mation of another smart card. mation of another smart card, and a processor 11 for 

executing encryption or decryption with the storage algo- 

BRIEF DESCRIPTION OF THE DRAWINGS rithm of first and second algorithm storage memories 12 and 

J ^ * - ^. 13 with respect to the key information stored in ROM 14 or 

The above objects and advantages of the present invention 15 1S 

will become more apparent by describing in detail a pre- ... . * . . . . . . 

fen-ed embodiment flTeof with refereaJ to the attached time, processors 11 and 16 may be constructed by 

* . , w . wired logic or may adopt a microprocessor. In case of 

drawings in w adopting the microprocessor, the encryption algorithm for a 

FIG. 1 is a block diagram of a general scrambler; smart ^ ^ be incorporated in a program. 

FIG. 2 is a block diagram of a general descrambler; 20 ^ and effect 0 f mc present invention con- 

FIG. 3 illustrates a transport format; structed as stated above will now be described. 

FIG. 4 illustrates a PES header shown in FIG. 3 in detail; in the present invention, a GA bitstream is transported in 

FIG. 5 illustrates the transport format by key distribution; the format as shown in FIGS. UA through 11C in which 

nG.6isablc>ckdiagramcfaconventionalAI^o^wler, 25 FIG. 11A shows a unscrambled format, FIG. 11B shows a 

jm j . , , T * ... . . „ . , scrambled format with respect to a bitstream, and FIG. 11C 

FIG. 7 is a block diagram of an illegal view and copy M fi format ^ ^ ^ bit$trcam u selcctively 

protection apparatus according to the present invention; scrambled. 

FIG. 8 is a detailed block diagram of the copy protection ^ mc mycntio ^ tf ^ QAbitstream is scrambled 

apparatus shown in FIG. 7; ^ it is assumed that a protection of any kind will be appUcable. 

FIG. 9 is a detailed block diagram of the smart card shown Therefore, if scrambled stream data SjcsCBSHE^KS) of 

in FIG. 7; mc f orma t shown in FIG. 11B or 11C is input to copy 

FIG. 10 illustrates the splitting of the bitstream shown in protection processor 4, a splitter shown in FIG. 10 splits the 

FIG. 8; stream data into bitstream Sja(BS)+n)X and keystreams 

FIGS. 11A-11F illustrates the format of the respective 35 E^KS). Then, a recording mode is performed to encrypt 

bitstrearas; again the split keystreams E^KS) to then be transported to 

FIGS. 12 through 18A-18B illustrate the connections smart card 3. 

state of the present invention; Here, as shown in FIG. 11C, if the bitstreams are partially 

FIGS 19A-19B and 20 show the flow of signals for scrambled the illegal view and copy protection function is 

operation of the present invention; and 40 adoptable only to the scrambled portion, thereby performing 

FIG. 21 shows the flow of signals for key exchange and a ^ P"*** 00 fam ^\ w . ^ 

authentication according to the present invention. » ^non ; saambled bifetreamsje transported as 

& shown in FIG, 11A, even if the bitstreams modulated/ 

DETAILED DESCRIPTION OF THE demodulated and decrypted in demodulator & error correc- 

INVENTION 45 tor 1 are input to copy protection processor 4, the data is not 

L1 „ ... transported to smart card 3. Either, ATV decoder 2 to which 

The present invention is appUcable to all recording ^ bitstreams of demodulator <St error corrector 1 are input 

reproduction devices that can record and reproduce a digital docs QOt ttmpa g t me data to smart card 3 but decrypts the 

signal, and for the sake of convenience of explanation, bitstream. 

descriptions shown hereinafter is for an embodiment in a ^ ^ _ . . . . . Mtt 

t nvrD „„ Therefore, there is no restnction in view and copy, 

case of DVCR, as an example. t . , . 

. , _ . CT « - 21 ,^»i *ri™, an A Here, the signal input from a tuner to demodulator & error 

Accordingly, as shown in FIG. 7 the N4ew and ^ from ATV 

copy prelection apparatus m a digital video system accord- ^ ^ 

mg to an embooiment of the present is a vSB-modula Jd£* from meVbits^ 

demodulator & error corrector 1 for modulating/ 55 ^ 

demodulating an analog broadcasting signal and Among input/output signals, bitstreams and keystreams 

RS-decoding the signal, an ATV decoder 2 for descrambling **c ^gital for DVCR - 

the output of demodulator & error corrector 1 according to At this tune, if the recording is performed, the bitstreams 

descrambling information, a copy protection processor 4 for are recorded onto DVCR and the recorded bitstreams are 

splitting the scrambled recording signal into a bitstream and 50 played back from a general DVCR. 

a key stream and encrypting the split key stream, and a smart In other words, even if non-scrambled MPEG bitstreams 
card 3 for decrypting the split and encrypted keystream of are input to copy protection processor 4 and passes through 

copy protection processor 4 and the index code of ATV sputter as shown in FIG. 10, there is no data transported to 
decoder 2 and outputting descrambling information ICS to smart card 3 due to no key information, thereby allowing a 

ATV decoder 2. 65 free view and copy. 

Copy protection processor 4. as shown in FIG. 8. includes Also, when the recording or copy protection functions are 
a RAM 17 for storing intrinsic key information of the smart executed in the present invention, the split bitstreams and 
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keystreams are transported to different lines from each other. bitstrcams S^sCBSHIDX with kcystrcams E G (KS) split, are 

The information on the copy protection method is trans- transported to copy protection processor 8 of recording side 

ported with an additional copy information field within the and the keystreams E°(KS) are again encrypted with respect 

PES header. to the key information Ak (S105). Then, the encrypted 

At this time, even if the scrambled bitstreams having no 5 keystreams E*/*[E°(KS)] are transported to smart card 7 

encrypted key are transported to an illegal user of the public of recording side via smart card 3. thereby allowing the 

channels, the descrambling is not executed properly in the recording onto the tape in a VCR 9 of recording side (S106). 

state where the key information is removed. On the contrary. FIG. 19B shows the signal flow in the 

Also, the split key is again encrypted to be transported. <*™ of the playback of the recorded tape with the same 

Thus, if there is no decryption algorithm, bitstreams cannot 10 fl ° w f sh ? wn » ™- m * mch C0 PV V?%*on 

be descrambled. processor 4 splits and determines keystreams (S108) if 

, . 4 . . ■ u *. t j * bitstreams played back from VCR are input (S107). thereby 

™« d "tZ* C m ? * ^ 7 *a determining whether the recording function is a "back-up 

used in the MPEG transport protocol for the illegal view and ^ ^ SJ „ * * 

copy protection, in which scrambling-executed bitstreams ,< C P , . . . 0 „ A 4 . . . 4 . . 

•d*? the copy protection function. 15 At *» 10 ste P .f IM. the tape u toenailed as a 

J. L1 . _ t _ tJ . . . . general recording tape, if there is no key information* and 

First, if transport-scr*^^^ field is changed in o * e i$ toemined as me ^ recording tape if encrypted 

a "not-scrambled" mode ATV decoder 2 does not execute k ^ ^ {KS) m dctcctcd Mso . tf mc kcystrcam 

gambling, so that the illegal user cannot operate the r^tf'CKS)] encrypted with respect to its own key infor- 

" cid * 20 mation Ak. the tape is determined as the recording tape of 

In such copy protection method, copy protection or free- ppc mnct i 0D . jf foe keystream T>sc A * fE°(KS)] encrypted 

copy function is determined by the transport-scrambling- rcspcct to ^ c information Al of another smart card, 

control field. Therefore, the illegal user cannot release the ^ ^ is deterrnined as the recording tape of back-up copy 

copy protection function only by manipulating the field. function. 

Next, the illegal user may modify the additional copy 25 Accordingly, copy protection processor 4 transports to 

informatioD field within the PES header, which converts the /jy decoder 2 the bitstream (BS) in the case of a general 

protection method. This method does not remove the pro- recording tape, and the bitstream Sj^SyHDX with key- 

tection method itself, which does not cause a noticeable streams E°(KS) split in the case of the recording tape of 

damage to the copy protection function. back-up copy function (S1W). 

The copy protection method supported by the present 30 Copy protection processor 4 transports to smart card 3 the 

invention having the above features includes a 41 no copy" encrypted keystream D^^IE^KS)) encrypted twice by the 

method, a "pay-per-copy (PPC) M method, and a 4 *back-up encryption algorithm E^itM with respect to its own key 

copy" method, with the default of a pay-pcr-vicw (FPV) information Ak if the back-up copy function is adopted 

function and a pay-per-play (PPP) function. during the playback of the recording tape of copy protection 

Here, the "no copy" method makes it completely difficult 35 function (Sill, S112 and S113). Also, copy protection 

to copy with another video tape. The "PPC" method is to pay processor 4 transports to smart card 3 the encrypted key- 

per one copy. The "back-up copy** method allows a video stream Es^lE^KS)] obtained by encrypting keystream 

tape played back from a first DVCR and copied from a E°(KS) by the encryption algorithm E 50 ^*) with respect 

second DVCR to be displayed normally only in the first to its own key information Ak if the back-up copy function 

DVCR but not in the second DVCR. 40 is not adopted (S112 and S113). 

The copy protection method according to the present While the above-described operations are performed by 

invention and the flow of the corresponding MPEG bit- copy protection processor 4, smart card 3 performs the 

streams will now be described with reference to FIGS. 19 operations of the signal flow as shown in FIG. 20. To be 

through 21. 45 detail, smart card 3 determines whether an index code IDX 

Here, FIG. 19 shows the flow of signals for operation of or keystream E°(KS) is input from ATV decoder 2 or not, by 

the copy protection processor during recording or playback performing broadcasting or playback operation (S114 and 

mode, FIG. 20 shows the flow of signals for operation of the S115), 

smart card corresponding to the copy protection processor, At this time, if the keystream E°(KS) is input instead of 

and FIG. 21 shows the flow of signals for key exchange and ^ the index code IDX, smart card 3 having determined the 

authentication during recording or playback operation. broadcasting view of PPV function decrypts the keystream 

First, referring to FIG. 19A, copy protection processor 4 E C (KS) by decryption algorithm D G («) with respect to the 

to which bitstreams are input checks the presence or absence bitstream GA (S116) and inputs the key information KS to 

of key information to determine whether it is scrambled or decoder 2 (S117). 

not, and determines whether the recording is the first record- 55 Accordingly. ATV decoder 2 reads the key information 

ing or the copy recording if the key information is scrambled KS of smart card 3, determines a descrambling method and 

(S101). In other words, in the case of scrambled data, it is descrambles the bitstream Sj^S) to output analog video 

detected whether the data is transported in the streams of and audio signals, thereby allowing a viewer to watch the 

SjcsCBSH-JDX format by splitting the data into bitstreams broadcasting program. 

S*5<BS) and keystreams E"(KS). If the streams of S^(BS) 60 If it is determined that the index code IDX is input in 

+fl)X format are detected, the recording is determined to be SU5, smart card 3 decrypts the keystream Ej^lE^KS)] 

the copy recording. If not detected, the recording is deter- input from copy protection processor 4 by decryption algo- 

mined to be the first recording (S102). rithm D 50 ^*) with respect to the key information Ak 

Accordingly, if the recording is tetermined to be the first (S118) and then determines whether the operation is a 

recording, the mixed streams S^ 5 (BS>fE 0 (KS) of bit- « playback operation or a recording operation (S119). 

streams and keystreams are recorded onto a tape (S106). If At this time, if it is determined that the operation is the 

the recording is determined to be the copy recording, the playback operation in S119. smart card 3 decrypts the 
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keystream E G (KS) by decryption algorithm D°(«) with 
respect to the bitstreara GA (S116) and inputs the key 
information KS to ATV decoder 2 (S117). 

Accordingly, ATV decoder 2 reads the key information 
KS of smart card 3. determines a descrambling method and 
descrambles the bitstream Sfcs(BS) split in copy protection 
processor 4 by the determined descrambling method to 
output analog video and audio signals, thereby allowing a 
viewer to watch the recorded program of the tape. 

If it is determined that the operation is the recording 
operation in SU9, smart card 3 determines whether the 
function is the back-up copy function or not (S120). If the 
function is the back-up copy function, the key stream 
E^KS) by decryption algorithm D 5 * 7 ^*) with respect to 
the key information Ak (S121). and then the decrypted 
keystream D^JE^KS)] by decryption algorithm D* c AJfc 
(•) with respect to the key information Al (S122). 

At this time, the keystream D^fD^lE^KS)]} 
decrypted in smart card 3 is transported to recording side 
(S123) and is input to copy protection processor 8 through 
smart card 7 (S124) to then be encrypted by encryption 
algorithm E? C A &*). 

Accordingly, smart card 7 inserts the encrypted keystream 
D^JE^KS)] into a position designated by the index code 
IDX and mixes the same with the bitstream S*s(BS) output 
from copy protection processor 4 of playback side to then be 
recorded onto the tape in VCR 9. 

If it is determined that the operation is the recording 
operation in S119. and it is determined in S 120 that the FPP 
function is adopted, instead of the back-up copy function ). 
smart card 3 decrypts the keystream E°(KS) by decryption 
algorithm D^X*) witn respect to the key information Al 
(S122) and transports the decrypted key information D 5 ^, 
[E C (KS)| to recording side (S123). 

At this time, copy protection processor 8 of recording 
side, having received the keystream D^fE^KS)] through 
smart card 7 encrypts the received keystream D^'IE 0 
(KS)1 by the encryption algorithm E 5 ^/*) and inserts the 
encrypted keystream |E G (KS)] into a position designated by 
the index code IDX, thereby mixing with the bitstream 
Sjc^BS) output from copy protection processor 4 of play- 
back side. Therefore, the bitstream S JCS (BS>fE 0 (KS) output 
from copy protection processor S is recorded onto the tape 
by VCR 9. 

As described above, in the present invention, all smart 
cards have common algorithm and common key with respect 
to encryption algorithm E°(») and decryption algorithm 
D°(») far the MPEG bitstream. 

Also, the encryption algorithm E 5 ^*) and decryption 
algorithm Tt sc A jf*) for a smart card are common for all 
smart card. However, key information is different for the 
respective smart cards. 

In other words, each smart card contains an authentication 
key corresponding to its own identification (ID) in itself. 

In performing such operation, the initialization including 
an authentication process for identify their counterpart 
between the copy protection processor and the smart card, 
and between the smart cards and a key exchange process is 
necessary. 

At this time, as the authentication process, there has been 
proposed various methods such as a method of using sym- 
metrical key algorithm like a DES algorithm, a method of 
using a public key algorithm like an RSA. or a method of 
using Fiat-Shamir (FS) scheme. 

In the present invention, the public key algorithm is used 
in the authentication process and the key exchange method 
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are illustrated in FIG. 21. Such methods are adopted on the 
basis that a public key (n, e) is shared by a key reception 
means 201 and a key transport means 202. 
At this time, key reception means 201 is a copy protection 

j processor or a smart card 1 of recording side, and key 
transport means 202 is its own smart card k. 

The embodiment of the present invention operating as 
shown in the above flowchart will now be described with 
reference to FIGS. 12 through 18. 

to In the present invention, as shown in FIG. 11A, if non- 
scrambled bitstream BS is transported, the circuit operates 
as shown in FIG. 12. Therefore, the bitstream modulated/ 
demodulated and RS -decoded in demodulator & error cor- 
rector 1 is decrypted in ATV decoder 2, thereby outputting 

15 analog video and audio signals. 

At this time, during recording operation, the bitstream BS 
output from demodulator & error corrector 1 is recorded 
onto the tape in VCR 5 through copy protection processor 4. 
During playback operation, the bitstream BS played back 

20 from VCR 5 is input to ATV decoder 2 through copy 
protection processor 4 and is decrypted, thereby outputting 
analog video and audio signals. 

In other wards, since the data is not generated from copy 
protection processor 4 to smart card 3, the view and copy are 

25 no t affected. 

As shown in FIGS. 11B and 11C. if scrambled bitstream 
is input, the CA function is adopted to perform the opera- 
tions shown in FIGS. 13 through 18. 
First, in case of performing the PFV function, the circuit 

30 operates as shown in FIG. 13. That is to say, if scrambled 
bitstream Sj^sfBS) and encrypted keystream E C (KS) are 
transported, demodulator & error corrector 1 demodulates 
the modulated input signal and then corrects the errors 
generated during transport through RS -decoding. 

35 At this time, ATV decoder 2 splits the keystream E°(KS) 
from the output S^(BS>+E C (KS) of demodulator & error 
corrector 1 and outputs the same to smart card 3. Then, smart 
card 3 decrypts the encrypted keystreara E°(KS) and outputs 
again the keystream KS to ATV decoder 2. 

Accordingly, ATV decoder 2 reads the key information 
KS of smart card 3. determines a descrambling method and 
descrambles the bitstream Sjcs(BS) to output analog video 
and audio signals. 

45 As described above, smart card 3 shown in FIG. 9 allows 
processor 11 to decrypt the encrypted keystream E°(KS) and 
to output the decrypted keystreara KS to ATV decoder 2 by 
decryption algorithm E°(«). 
In the case of recording scrambled bitstream for the first 

50 time, the circuit operates as shown in FIG. 14. in which the 
transported bitstream S JCS (BS>+E 0 (KS) is error-corrected in 
demodulator & error corrector 1 through RS-decoding and 
then is input to VCR 5 through copy protection processor 4 
to then be recorded onto the tape. 

55 In the case of playing back the bitstream recorded as 
described above, if the function is PPP function, the system 
operates as shown in FIG. 15. If the bitstream Sjcs(BS>fE 0 
(KS) played back from VCR 5 is input to copy protection 
processor 4, copy protection processor 4 splits the played- 

60 back bitstream S^BS>+E^(KS) into me bitstream Sjcs^S) 
and keystream E"(KS) and then again encrypts the split 
keystream E^(KS) by encryption algorithm E ^C*) to then 
output the same to smart card 3. The split bitstream S^^^BS) 
is output to ATV decoder 2 with the extracted portion of the 

65 keystream E C (KS) inserted with an index code IDX. 

At this time, smart card 3 having received the index code 
IDX through ATV decoder 2, decrypts the encrypted key- 
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stream E^jJE^KS)! of copy protection processor 2 by encrypted keystream D^^IE^KS)!. The restored 

decryption algorithm Er* 7 ^*) for smart card and outputs (E°(KS)] is mixed with the bitstream GjtsCBS) output from 

the key stream (descrambling information) KS to ATV copy protection processor 4 of playback side according to 

decoder 2 (S117). the index code IDX to then be output to VCR 9. thereby 

Accordingly, ATV decoder 2 reads the key stream KS of 5 recording the same onto another tape, 

smart card 3. determines a descrambling method and Here, the charge is counted in the improved smart card 3 

decrypts the bitstream S^BS) input through copy protec- or 7. 

tion processor 4, thereby outputting analog video and audio jfe ^& recorded by performing the back-up copy func- 

signals. tion can be played back only from the VCR recording the 

Also, in the case of recording the data recorded as shown 10 original tape. In the case of a normal playback, the operation 
in FIG. 14 onto a different VCR, the PPC function is is executed as shown in FIG. 18A. 
performed as shown in FIG. 16. If the bitstream S^BSH ^ other words, if the bitstream Sj^BS^D^IE^KS)] 
E°(KS) played back from VCR 5 is input to copy protection played back from VCR 5 is input to copy protection pro- 
processor 4. copy protection processor 4 splits the bitstream cessor 4. copy protection processor 4 splits the bitstream 
S-^SHE^KSJinto the bitstream S^S) and keystream 15 Sjc/BSHI^JE^KS)! into the bitstream S^S) and 
E^KS) and then again encrypts the split keystream E C (KS) keystream D^JE^KS)] and then again encrypts twice the 
by encryption algorithm E 50 ^*) to then output the same to split keystream D 5C a*[E°(KS)] by encryption algorithm 
smart card 3. The split bitstream S^BS) is output to copy E sc ^) to then output the same to smart card 3. The split 
protection processor 8 of recording side with the extracted bitstream S^BS) is output to ATV decoder 2 with the 
portion of the keystream E°(KS) inserted with the index 20 extracted portion of the keystream D^fE^KS)! inserted 
code IDX. with the index code IDX. 

At this time, smart card 3 of playback side decrypts the M ^ t{me smart card 3 having received the index code 

keystream B^fE^KS)] encryptedin copy protection pro- mx £TV decoder 2 decrypts twice the keystream 

cessor 4 by decryption algorithm Er A/ (») with respect to ^ E^IB^KS)] encrypted in copy protection processor 2 by 

the key information Al stored in RAM 15 and then outputs decryption algorithm if 0 ^) for smart card and then 

the decrypted keystream D^IE (KS)] to smart card 7 of outputs the key stream (descrambling information) KS to 

recording side. ATV decoder 2. 

Accordingly, if smart card 7 of recording side receives the Accordingly. ATV decoder 2 reads the key stream KS of 

keystream D^^^KS)] of smart card 3 of playback side 3Q smart card 3 determines a descrambling method and 

and outputs the same to copy protection processor^ copy decrypts the bitstream S KS (BS) input through copy protec- 

protection processor 8 encrypts the keystream ET-^IE ^ processor 4 thereby outputting analog video and audio 

(KS)] and restores the same into the original encrypted signals. 

keystream E*(KS). which is mixed with the bitstream ^ ^ ^ rf m abnormal ^ back tQ vCR 

(BS) output from ^ ^^^^^^ " not to the original recorded VCR, the operation is executed 

sifcaccording to the index code IDX to then be output to ^ ^" lgB mc of mc 

VCR 9, thereby recording the same onto another tape. , ^ ' 

The data of the tape recorded in the above^scribed ^ back from 

c^hons adopts the PPP funcUon and is played back as yCR to ^ ^ ^ J py J^/pi^ ^ 

shown in hiu. 15 40 processor 8 splits the played-back data S^S) 

Also, in me case of recording the data recorded as shown r^(KS)l to separate the bitstream S^SHTDX. 

in FIG. 14 onto another VCR, the back-up copy function is <"\ v u -* ~ n«c mO/wu ;« 

Derformcd as shown in FIG 17 time, the split bitstream D ^[E (KS)] is 

, *u a -r*u u *-L " c /T5CYxrro,ire\ «l«>~<< encrypted with respect to its own key information Al and is 

In other words, if the bitstream S^S^E (KS) played ^ ^ ^ rcspcct to the k ey information Al to 
back from VCR 5 is input to c^y^tection P^sor * 45 ^ ^E^ A /D^°(KS)])} to then be trans- 
copy protection processor 4 splits the bitstream S^sfBSK «>rH 7 
E^KS) into the bitstream S^S) and keystream E^(KS) ported to smart cara /. 

and then again encrypts thfsplit keystream E«(KS) by At ^ S J^^%*? <** no f ^ 
encxypUoD^crithmE^^*) to then output the same to ^^^^^ ] ^^^ mform4UOD 
smarted 3. The split bit£eam S«(BS) is output to copy ^ KS may not be transported to ATV decoder 6. 
protection processor 8 of recording side with the extracted Accordingly, smart card 7 cannot descrambles the bit- 
portion of the keystream E°(KS) inserted with the index stream S^S) so that the copied tape cannot be played 
code IDX. back. 

At this time, smart card 3 of playback side decrypts twice As described above, according to the present invention, 

the keystream E^xJ^KSM encrypted in copy protection 55 since the authentication and key exchange process are 

processor 4 by decryption algorithm D^a/") with respect to automatically performed during power-on or connection 

its own key information Ak stored in ROM 14 and then between DVCRs. the illegal view and copy protection 

decrypts again by decryption algorithm Er* c A /*) with function for illegal smart card can be automatically per- 

respect to the key information Al stored in RAM 15 and then formed. Also, since the illegal view and copy protection is 

outputs the decrypted keystream D^^D^aJE^KS)]} to 60 partially performed, the scrambling process is performed 

smart card 7 of recording side, with respect to a protection desired portion of a program. 

Accordingly, if the keystream D^D^JE^KS)]} of thereby performing the illegal view and copy protection 

smart card 3 of playback side is output to copy protection automatically and levying the charge in a desirable manner, 

processor 8 of recording side through smart card 7 of Also, in the present invention, since the split bitstream 

recording side, copy protection processor 8 encrypts the 63 and keystream are transported to different paths, the protec- 

key stream D^flS^JE^CKS)]} with respect to the key tion data amount can be reduced, thereby efficiently per- 

information Al and restores the same into the original forming the illegal view and copy protection. In impiement- 
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ing the illegal view protection and illegal copy protection for 
a smart card, the PPV. PPR PPC and back-up copy functions 
are differentiated, thereby levying the charges differentially 
for the respective functions. 

According to the present invention, the copy protection 
for digital signals, which is adoptable for DSM applications 
can be implemented, which allows a program copyright 
protection for a DSM such as a DVCR. Therefore, the 
reliability for illegal view and copy protection is increased. 

Finally, in order to facilitate the understanding of the 
present invention, terms used in the specification will be 
defined as follows: 

1) BS: non-scrambled GA bitstream; 

2) KS=|Ko, K A , ICj, . . . K,, . . . KJ: keystream (Here, n 
is total number of keys used for scrambling.); 

3) BS=[BS 0 , BS t , BS 2 , . . . BS,, . . . BS n ]: bitstream (Here, 
BS; is one segment of BS and is a scrambling unit); 

• S^S,). 
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4) S^BSHS^CBSo), S^BSJ. S^(BS 2 ). 
■ * . Sjo.CBSJ]: scrambled GA bitstream; 

5) E(»)&I>(»): algorithms used for encryption and decryp- 
tion of keys in GA; E^KSHE^Kp), E^K,), E C (1CJ. 
. . . E°(K,), . . . E^KJ] and D^ETOWDTE°(1W 
], D^E 0 ^))- D°[E G (K 2 )], . . . D°tE0(mi. - ■ - 
D C [E C (KJ]]=KS; 

6) IDS=[0. 1. 2. . . . i. . . . nj: index stream; 

7) Ak: authentication key for smart card (k); and 

8) E sc a (»)&D sc i a(«): encryption and decryption algo- 
rithms for smart card used the smart card authentication 
key (A) as the key. 

What is claimed is: 

1. An illegal view and copy protection method in a digital 
video system comprising: 

a determination step for determining received data of 
having been scrambled; 

a reproduction step, if the received data was determined 
to be scrambled data in the determination step, splitting 
the scrambled data into a bitstream and a keystream for 
decrypting the split keystream for reading in key 
information, and descrambling the split bitstream 
according to the read in key information for displaying 
the bitstream on a display; 

a recording step for. if the received data was determined 
to be scrambled data in the determination step, record- 
ing the scrambled data on a recording medium either as 
scrambled data of a bitstream and a keystream accord- 
ing to a recording or copying mode, or after splitting 
the scrambled data into a bitstream and a keystream, 
encrypting the split keystream, and mixing the 
encrypted keystream with the bitstream; and 

a transporting step, if the received data was determined to 
be scrambled data in the determination step, splitting 
the scrambled data into a bitstream and a keystream for 
transporting the split keystream either after decrypting 
the split keystream with respect to key information 
from recording side according to a pay-pcr-copy mode 
or a back-up copy mode, or after decrypting the split 
keystream two times with respect to key information of so 
said keystream' s and key information from recording 
side; 

thereby the reproduction step, the recording step and the 
transporting step can be performed simultaneously or 
selectively. 

2. An illegal view and copy protection method in a digital 
video system as claimed in claim 1, wherein, if the received 



data was determined to be partially scrambled data in the 
determination step, said illegal view and copy protection 
method is applied only to the partially scrambled data. 

3. An illegal view and copy protection method in a digital 
video system as claimed in claim 1, wherein the reproduc- 
tion step includes the step of decrypting said split keystream 
with a decryption algorithm, for reading in key information. 

4. An illegal view and copy protection method in a digital 
video system as claimed in claim 1. wherein a copying 
operation in the recording step includes. 

a first step for encrypting the key stream with respect to 

said keystream' s key information, 
a second step for determining the encrypted keystream of 
being a back-up copy mode or a pay-per-copy mode, 
a third step for, if the mode was determined to be the 
pay-per-copy mode in the first step, encrypting the 
keystream transported after being decrypted with 
respect to the key information from a recording side, 
and then inserting the same into a position correspond- 
ing to an index code to record the same together with 
the bitstream, and 
a fourth step for. if fee mode is determined to be the 
back-up copy mode in the second step, encrypting the 
keystream transported after being decrypted with 
respect to said keystream* s key information and the key 
information from a recording side with respect to the 
key information from a recording side, decrypting the 
same with respect to said keystream' s key information. 
3Q and then inserting the same into a position correspond- 
ing to an index code, to record the same together with 
the bitstream, 

5. An illegal view and copy protection method in a digital 
video system as claimed in claim 4, wherein said pay-per- 

35 copy mode operation the third step includes, 

a first transportation step for transporting the scrambled 
data after splitting the bitstream and the keystream and 
inserting said index code into the split portion of said 
keystream, 

40 a second transportation step for transporting the key- 
stream split in the first transportation step after encrypt- 
ing the keystream with respect to said keystream's key 
information and decrypting the same with respect to the 
key information from a recording side, 
a recording step for recording the keystream transported 
in the second transportation step on a recording 
medium after encrypting the keystream with respect to 
the key information from a recording side in correspon- 
dence with the index code and mixing the same with the 
bitstream transported in the first transportation step. 

6. An illegal view and copy protection method in a digital 
video system as claimed in claim 5. wherein the reproduc- 
tion operation after finish of the recording step includes, 

a splitting step for splitting the reproduced bitstream into 
a bitstream and a keystream and inserting an index code 
into the split portion of the keystream, 
an encrypting step for encrypting the keystream split in 
the splitting step with respect to said keystream' s key 
information. 

a reading in step for reading in key information by 
decrypting the keystream encrypted in the encrypting 
step, with respect to said keystream' s key information, 
and 

a decrypting step for descrambling the bitstream split 
according to the key information read in in the reading 
in step. 
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7. An illegal view and copy protection method in a digital 
video system as claimed in claim 4. wherein said back-up 
copy mode operation in the fourth step includes, 

a first transportation step for transporting the scrambled 
data after splitting the scrambled data into a bitstream s 
and a keystream and inserting an index code into the 
split portion of the keystream, 

a second transportation step for transporting the key- 
stream split in the first transportation step after encrypt- 
ing the keystream with respect to said keystrcam's key io 
information and decrypting the encrypted keystream 
with respect to the key information from a recording 
side and said keystream* s key information, 

a recording step for recording the keystream transported 
in the second transportation step on a recording 15 
medium after encrypting the keystream with respect to 
the key information from a recording side in correspon- 
dence with the index code and mixing the same with the 
bitstream transported in the first transportation step. 

8. An illegal view and copy protection method in a digital 20 
video system as claimed in claim 7. wherein the reproduc- 
tion operation after finish of the recording step includes, 

a splitting step for splitting the reproduced bitstream into 
a bitstream and a keystream and inserting an index code 
into the split portion of the keystream, 23 

an encrypting step for encrypting the keystream split in 
the splitting step with respect to said keystream's key 
information, 

a reading in step for reading in key information by 
decrypting the keystream encrypted for two times in the 30 
encrypting step, with respect to said keystream* s key 
information and the MPEG bitstream, and 

a decrypting step for descrambling the bitstream split 
according to the key information read in in the reading 
in step. 

9. An illegal view and copy protection method in a digital 
video system comprising: 

a reproduction step, on reception of scrambled data, 
splitting the scrambled data into a bitstream and a 
keystream for decrypting the split keystream for read- 
ing in key information, and descrambling the split 
bitstream according to the read in key information for 
displaying the bitstream on a display; and, 

a recording step for, on reception of scrambled data. 45 
recording the scrambled data on a recording medium as 
scrambled data of a bitstream and a keystream; 

thereby the reproduction step and the recording step can 
be performed simultaneously or selectively. 

10. An illegal view and copy protection method in a ^ 
digital video system as claimed in claim 9, wherein the 
reproduction step includes the steps of decrypting said split 
keystream with a decryption algorithm for reading in key 
information and determining a descrambling method with 
the read in key information, 55 

11. An illegal view and copy protection method in a 
digital video system as claimed in claim 9, wherein the 
reproduction operation after finish of the recording step 
includes, 

a splitting step for splitting the reproduced bitstream into & 
a bitstream and a keystream and inserting an index code 
into the split portion of the keystream, 

an encrypting step for encrypting the keystream split in 
the splitting step according to an encrypting algorithm 
with respect to said keystream' s key information, 65 

a reading in step for reading in key information by 
decrypting the keystream encrypted for two times in the 



encrypting step, with respect to said keystream's key 
information, and 
a decrypting step for descrambling the bitstream split 
according to the key information read in in the reading 
in step for displaying on a display. 

12. An illegal view and copy protection method in a 
digital video system on reception of a keystream encrypted 
with respect to said keystream* s key information at copying, 
comprising: 

a determining step for determining the mode of the 
keystream being a back-up copy mode or a pay -per- 
copy mode; 

a first transportation step for, if the mode was determined 
to be a PPC mode in the determining step, decrypting 
the keystream with respect to key information from a 
recording side for transporting the keystream; 

a first recording step for encrypting the keystream trans- 
ported in the first transportation step with respect to the 
key information from the recording side and inserting 
the encrypted keystream into a position corresponding 
to an index code, far recording the keystream together 
with a bitstream on a recording medium; 

a second transportation step for, if the mode was deter- 
mined to be a back-up copy mode in the determining 
step, decrypting the keystream for two times with 
respect to said keystream's key information and the key 
information from the recording side for transporting the 
keystream; and 

a second recording step for encrypting the keystream 
transported in the second transportation step with 
respect to the key information from the recording side 
and inserting the encrypted keystream into the position 
corresponding to the index code, for recording the 
keystream together with the bitstream on a recording 
medium, 

13. An illegal view and copy protection method in a 
digital video system as claimed in claim 12, wherein the first 
transportation step includes the steps for decrypting the 
keystream, encrypted with respect to said keystream' s key 
information, with respect to said keystream* s key informa- 
tion and decrypting the keystream again with respect to the 
key information from the recording side, for transporting the 
keystream. 

14. An illegal view and copy protection method in a 
digital video system as claimed in claim 12. wherein the 
second transportation step includes the step for decrypting 
the bitstream. decrypted with respect to said keystream' s 
key information, for two times with respect to said key- 
stream's key information and decrypting the keystream 
again with respect to the key information from the recording 
side for transporting the keystream. 

15. An illegal view and copy protection method in a 
digital video system, comprising: 

a pay-per-copy mode reproduction step for having deter- 
mined the recording medium being a pay-per-copy 
recording medium on detection of a keystream at 
reproduction from a recording medium, encrypting the 
keystream with respect to said keystream* s key infor- 
mation and decrypting the keystream with respect to 
said key stream's key information for reading in the key 
information, for descrambling the bitstream using both 
the read in key information and an index code; and, 

a 'back-up copy* mode reproduction step for. having 
determined the recording medium being a 'back-up 
copy* recording medium on detection of a keystream 
decrypted with respect to said keystream* s key infor- 
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mation at reproduction from a recording medium. a RAM fox storing intrinsic key information of said smart 

encrypting the key stream for two times with respect to card. 

said keystreanTs key information and the key informa- an algorithm storage memory for storing an encryption 

tion from a recording side and decrypting the key- algorithm, and 

stream with respect to said key stream's key informa- 5 a processor for executing an encryption program of said 

tion for reading in the key information, for algorithm storage memory with the key information of 

descrambling the bitstream using both the read in key sa id RAM. 

information and an index code. 23. An illegal view and copy protection device in a digital 

16. An illegal view and copy protection device lo a digital video system as claimed in claim 16, wherein said smart 
video system, comprising: 10 card includes: 

demodulating & error correcting means for demodulating a first algorithm storage memory for storing a decryption 

a broadcasting signal and Reed Solomon decoding said algorithm program for a bitstream. 

signal; a second algorithm storage memory for storing said smart 

copy protection processing means for transporting the card's decryption algorithm program 

output of said demodulating & error correcting means ^ a R qm f or boring said smart card's key information, and 

to a digital recording/reproduction device, splitting the a for ternporarily storing key information of another 

scrambled recording signal reproduced from said digi- smart 

tal recording/reproduction device into a bitstream and a 24. An illegal view and copy protection device in a digital 

keystream. and encrypting the split keystream; vidfi0 system comprising: 

decoding means for descrambling the bitstream from said tet c protection processing means for splitting repro- 

demodulating & error correcting means or the copy ^ from a ^ rcC ording/reprc>duction 

protection processing means according to descrambling ^ a biutream ^ a keystream and encrypting 

information; and, the split keystream: 

a smart card for decrypting the encrypted keystream of J* decrypting encrypted 

said copy protection processing means for applying to sccoiia smart ^^J^ ^I}^ w ~*£in 0 

said deeding means as descrinbling information. 25 keystream from said first copy protection processing 

17. An illegal view and copy protection device in a digital means with respect to said keystream s key urfcrrnauon 
video system as claimed in claim 16, wherein said illegal ^d the key information from a recording side; and, 
view protection function is performed such that said decod- second copy protection processing means for encrypting 
ing means connected to said demodulating & error correct- the keystream from the first smart card transported 
ing means is connected to said smart card to decode the 30 through the second smart card with respect to said 
keystream of said decoding means and the descrambling keystream/s key information and transporting the 
information is output to said decoding means. encrypted keystream together with the split bitstream to 

18. An illegal view and copy protection device in a digital a second digital recording/reproduction device, for 
video system as claimed in claim 16, wherein first recording recording on a recording medium. 

is performed by connected said copy protection processing 35 25. An illegal view and copy protection device in a digital 

means connected to said demodulating & error correcting video system as claimed in claim 24. wherein said first copy 

means to said digital recording/reproduction device. protection processing means encrypts the keystream with 

19. An illegal view and copy protection device in a digital respect to said keystreanfs key information and transports 
video system as claimed in claim 16, wherein the illegal the same to said first smart card. 

reproduction protection is performed such that a keystream 40 26. An illegal view and copy protection device in a digital 

line of said copy protection processing means connected to video system as claimed in claim 24, wherein said smart 

said digital recording/reproductioD device is connected to card decrypts the keystream of said first copy protection 

said smart card, a bitstream line is connected to said decod- processing means with respect to said keystream 1 s key 

ing means, and said copy protection processing means and information and the key information of recording side and 

said decoding means are connected to each other, so that said 43 then transports the same to said second smart card, 

smart card decrypts the keystream of said copy protection 27. An illegal view and copy protection device in a digital 

processing means into its own key information correspond- video system as claimed in claim 24. wherein said second 

ing to the index code of said decoding means to then output copy protection processing means encrypts the keystream 

the same to said decoding means. transported from said second smart card with respect to said 

20. An illegal view and copy protection device in a digital 50 keystreanfs key information and mixes the same with the 
video system as claimed in claim 19, wherein saidprotection bitstream from said first copy protection processing means, 
processing means encrypts twice the keystream split from 28. An illegal view and copy protection device in a digital 
reproduced data of said digital reccrding^reproduction dur- video system as claimed in claim 24, wherein said first smart 
ing reproduction from a recording medium in a pay-per- card decrypts the keystream from said first copy protection 
copy mode withrespect to said keystream's key information 55 processing means twice with respect to said keystream' s key 
and transports the same to said smart card. information during a back-up copy mode and decrypts the 

21. An illegal view and copy protection device in a digital same with respect to the key information from a recording 
video system as claimed in claim 19. wherein said protection side. 

processing means encrypts the keystream split from played- 29. An illegal view and copy protection device in a digital 
back data of said digital recording/reproduction device for 60 video system as claimed in claim 24, wherein said second 
more man two times during reproduction from a recording copy protection processing means encrypts the keystream 
medium in back-up copy mode with respect to said key- transported from said second smart card with respect to said 
stream's key information and transports the same to said keystream* s key information and mixes the encrypted key- 
smart card. stream with the bitstream. 

22. An illegal view and copy protection device in a digital 65 30. An illegal view and copy protection device in a digital 
video system as claimed in claim 16. wherein said copy video system as claimed in claim 24, wherein each of said 
protection processing means includes: first and second copy protection processing means includes 
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a RAM for storing intrinsic key information of said smart 
card. 

an algorithm storage memory for storing an encryption 

algorithm, and 
a processor for executing an encryption program of said 

algorithm storage memory with the key information of 

said RAM. 

31. An illegal view and copy protection device in a digital 
video system as claimed in claim 24, wherein each of said 
first and second smart cards includes 

a first algorithm storage memory for storing a decryption 

algorithm program for a bitstream, 
a second algorithm storage memory for storing said 

keystream's decryption algorithm program, 
a ROM for storing said keystxeam's key information, and 
a RAM for temporarily storing key informatioD of another 

smart card. 

32. An illegal view and copy protection device in a digital 
video system as claimed in claim 18. wherein said copy 
protection processing means includes: 

a RAM for storing intrinsic key information of said smart 
card, 

an algorithm storage memory far storing an encryption 

algorithm and 
a processor for executing an encryption program of said 

algorithm storage memory with the key information of 

said RAM. 

33. An illegal view and copy protection device in a digital 30 
video system as claimed in claim 19, wherein said copy 
protection processing means includes: 
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a RAM for storing intrinsic key information of said smart 
card, 

an algorithm storage memory for storing an encryption 

algorithm, and 
a processor for executing an encryption program of said 

algorithm storage memory with the key information of 

said RAM. 

34. An illegal view and copy protection device in a digital 
video system as claimed in claim 17, wherein said smart 
card includes: 

a first algorithm storage memory for storing a decryption 

algorithm program for a bitstream. 
a second algorithm storage memory for storing said smart 

card's decryption algorithm program, 
a ROM for storing said smart card's key information, and 
a RAM for temporarily storing key information of another 

smart card. 

35. An illegal view and copy protection device in a digital 
video system as claimed in claim 19. wherein said smart 
card includes: 

a first algorithm storage memory for storing a decryption 

algorithm program for a bitstream. 
a second algorithm storage memory for storing said smart 

card's decryption algorithm program, 
a ROM for storing said smart card's key information, and 
a RAM for temporarily storing key information of another 

smart card. 
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